CVE-2023-4228CWE-1004

ioLogik 4000 Series: Session Cookies Attribute Not Set Properly

Low · published August 24, 2023

CVSS v3.1
3.1
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-1004 · Sensitive Cookie Without 'HttpOnly' Flag
Published
2023-08-24T06:19Z
EPSS history
Timeline
  • 24 AUG 06:19Z
    ioLogik 4000 Series: Session Cookies Attribute Not Set Properly
    cvelistv5